Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20323138393131.roa
File: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=
Subject key identifier: 76:42:47:11:D9:41:0C:E6:C1:74:0D:D5:DF:12:14:F8:37:64:60:68
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 039725084A454CF40ED401FCBB99BFCD14AA754F
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20323138393131.roa
Signing time: Mon 07 Sep 2026 09:47:45 +0000
ROA not before: Mon 07 Sep 2026 09:42:45 +0000
ROA not after: Mon 06 Sep 2027 09:47:45 +0000
asID: 218911
IP address blocks: 87.254.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:97:25:08:4a:45:4c:f4:0e:d4:01:fc:bb:99:bf:cd:14:aa:75:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 7 09:42:45 2026 GMT
Not After : Sep 6 09:47:45 2027 GMT
Subject: CN=76424711D9410CE6C1740DD5DF1214F837646068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:28:ec:a7:a4:85:0b:22:23:cd:f6:ba:f4:
6d:54:65:89:44:d0:f9:0d:dd:dd:68:c2:47:9f:5f:
33:a1:36:8a:04:2a:bb:96:fb:e2:b7:a5:9f:b7:dc:
66:5e:a5:65:45:2b:1c:f9:5c:e4:2d:b8:f9:b8:86:
39:81:05:16:e6:18:d1:1c:81:3f:d1:b5:67:48:c1:
17:a2:46:c7:65:30:d5:31:80:ac:30:e8:c0:08:16:
db:35:db:91:4f:e1:81:cf:44:33:5a:76:00:45:82:
0c:c4:b3:54:bd:7e:0d:ab:00:6f:fb:c1:8f:9d:ce:
1f:f8:80:cb:c4:9a:36:e6:db:a7:e7:53:e4:b6:e9:
14:02:9a:ef:63:2f:99:63:d9:79:fa:09:c2:b7:bb:
ce:ab:82:30:f6:a2:fc:64:1b:d9:4b:db:f1:1c:a3:
7f:57:bf:f1:c3:56:fa:e5:87:79:21:08:20:32:59:
f4:28:b5:11:0d:3b:26:5c:95:7b:f2:83:25:12:03:
25:a7:bf:57:9a:77:94:e0:5d:17:93:2f:f3:55:1e:
79:1c:2c:82:8f:96:8e:24:67:6f:ed:fb:12:47:bc:
ef:57:06:9c:35:f3:26:02:d1:16:24:d6:4c:d3:fb:
65:cd:63:bb:51:72:1b:29:94:52:af:c4:c6:9f:19:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:47:11:D9:41:0C:E6:C1:74:0D:D5:DF:12:14:F8:37:64:60:68
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/38372e3235342e32312e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.21.0/24
Signature Algorithm: sha256WithRSAEncryption
75:63:6e:17:ec:fc:46:5f:25:fe:40:31:6c:16:10:5b:5b:6a:
a9:f5:6d:a7:9d:fa:43:96:15:18:26:1e:f9:02:2d:23:e7:06:
b9:bd:07:76:0e:7d:02:aa:ac:09:d5:d3:32:80:1f:51:07:9c:
cd:dd:89:76:5b:f4:ea:f4:34:2b:4e:28:34:5e:d6:ca:91:a1:
43:89:5a:6e:9b:21:b0:f3:a1:4c:03:8a:32:24:aa:9e:57:86:
7d:60:09:79:64:8b:06:ea:50:81:d6:d3:1f:5f:66:7e:67:f4:
03:7d:da:19:40:bf:35:e8:55:a5:99:fe:ef:24:6e:b7:10:31:
24:6c:70:26:bb:a9:bf:97:d6:22:12:e9:55:39:78:c2:a6:8f:
39:50:ad:0b:ad:32:b9:2f:46:13:c4:90:df:af:a6:88:83:77:
86:2b:1b:72:95:eb:8b:2b:9e:f3:4a:e9:1d:0f:36:fa:09:18:
2e:c1:ad:61:84:53:d9:d2:cb:04:af:a2:5c:d7:e9:ff:5d:8e:
7a:9e:56:29:48:e7:f0:b5:70:a3:2f:05:f6:fd:71:6a:3a:e8:
39:a9:6c:c1:52:94:10:c8:bd:50:de:cd:dd:90:c8:99:de:b8:
a6:23:b7:37:68:af:0a:3c:f5:7c:a3:4f:7f:43:57:4e:2c:04:
7d:d9:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:47:10 2026 by rpki-client